Jetimob Plataforma Imobiliaria Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Jetimob Plataforma Imobiliaria version 20240627-0. The issue occurs in the 'Pessoas' section, specifically within the 'Profissão' field. When creating or editing a profile, malicious scripts can be injected and are executed whenever the profile is viewed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the profile.

Reproduction

To reproduce this vulnerability, create or edit a profile in the 'Pessoas' section of Jetimob Plataforma Imobiliaria version 20240627-0. Inject a script payload, such as an image tag with an 'onerror' event, into the 'Profissão' field. Once the profile is saved, the injected script will execute when the profile is loaded.